CVE-2018-3829 — Improper Authorization in Cloud Enterprise

CWE-285 — Improper AuthorizationCWE-290 — Authentication Bypass by Spoofing4 documents4 sources
Severity
5.3MEDIUMNVD
EPSS
0.2%
top 61.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Elastic Cloud Enterprise
Timeline
PublishedSep 19
Latest updateMay 13

Description

In Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 it was discovered that a user could scale out allocators on new hosts with an invalid roles token. An attacker with access to the previous runner ID and IP address of the coordinator-host could add a allocator to an existing ECE install to gain access to other clusters data.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.6 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5elastic/elastic_cloud_enterprisebefore 1.1.4

🔴Vulnerability Details

3
GHSA
GHSA-pc7v-g5f6-75fv: In Elastic Cloud Enterprise (ECE) versions prior to 1↗2022-05-13
▶
OSV
gnutls28 vulnerabilities↗2019-05-30
▶
CVEList
CVE-2018-3829: In Elastic Cloud Enterprise (ECE) versions prior to 1↗2018-09-19
▶
CVE-2018-3829 — Improper Authorization in Elastic | cvebase